SECRET / /NGFORN 


(U//FOUO) IMV Frequently Asked Questions 


Q. (U//FOUO) How is the IMV survey linked to my case? 
A, (U//FOUO) Sentinel prompts users ta complete the survey based on the entity/entities indexed as the Subject of a 
Counterterrorism case. 


Q. (U//FOUO) Who can compiete the IMV survey? 
A. (U//FOUO) Any case participant in Sentinel can complete the IMV survey. Sentinel will prompt the user to update the 
survey each time a serial is uploaded to the case. 


Q (U//FOUO} What do these numbers mean? 

A. (5//NF) IMV applies statistical methodology and weighting to historical CT cases — both those that mobilized to 
violence and those that did not. When a survey is completed, IMV scoring compares the current CT subject's information 
to the historical data to produce an overall score indicating a likelihood of mobilizing to violence. Higher scores indicate 
a greater likelihood of mobilization. 


{S//NF) IMV calculates several scores, which are further described below, on scale of 0-100. (NOTE: Scores should be 
considered tools for case comparison only and do not provide conclusive evidence that a subject will take violent 
action.) 

1. (S//NF} Overail Score — Calculated based on responses to weighted survey questions. Affirmative answers to 
questions deemed to be more indicative of mobilization to violence will result ina higher overall score: 

2. (S//NF) Mobilization Score — Calculated based on responses to weighted survey questions. The percentage of 
questions indicative of mobilization to violence that were answered “Yes.” Measures the subject's level of 
mobilization or likelihood of carrying out a violent act, relative to historical cases. 

3. (S//NF) Radicalization Score — Calculated based on responses to weighted survey questions. The percentage of 
questions indicative of radicalization to violent ideology that were answered “Yes.” Indicates the subject's likely 
level of radicalization or internal commitment to a violent ideology, relative to historical cases. 

4. (S//NF) Unknown Score — The percentage of total questions that were answered “Unknown.” Represents the 
inherent risk of not knowing the answer to survey questions. Questions answered “Unknown” are not weighted. 


Q. (U//FOUO) Based on my subject's scores, is he or she at high risk for mobilization? 

A. (5//NF) Risk of mobilization is assessed based on several measures: the individual subject's weighted score and 
comparison to other subjects’ scores. Scores will change each time the subject’s survey is updated, and each time an 
IMV update is conducted. To view the most updated data regarding how your subject compares to other subjects, access 
the “CT Survey Drilldown” report in Sentinel. 


Q (U//FOUO) How can | best use IMV results in my case? 

A. (U//FOUO) IMV survey results can be used by Case Agents and Analysts to gain an understanding of how their cases 
compare to other CT cases. IMV scores can assist decision-makers with determining where to focus additional 
resources. 


(S//NF) The AMFC stresses that IMV should be considered a tool for comparing a given case subject to others who have 
mobilized to violence, High scores should not be viewed as conclusive evidence that a subject will mobilize. 
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Q. (U//FOUO) How do | pull reports on IMV survey results? 

A. (U//FOUO) in Sentinel, click Reports. Under Counterterrorism Reports, select “CT Survey Drilldown” to view cases 
from all 56 Field Offices ranked by IMV score. Select “CT Survey Overview” to view a heatmap of IMV data from across 
the country. Select “CT Survey Reports” to view all CT IMV survey results. All reports can be filtered by Case Type, Field 
Office, specific indicators, and score range within Sentinel. Reports can aiso be exported to Excel. 


Q. (U//FOUO) What should | do about duplicate IMV surveys for the same subject? 
A. (U//FQUQ) Case participants should ensure that only one survey per subject is created. If multiple entities have been 


created for the same subject, case participants should merge them using Sentinel’s merge feature. This will also merge 
the surveys. 


Q. (U//FOUO) Is the IMV survey discoverable? 
A, (U//FOUO) No, The IMV survey is considered a secondary document derived from evidence that already exists within 
a case. 


Q. (U//FOUO) | have enough to do just working my case. Why do | have to complete this additional administrative 
step? 

A. (U//FOUO) IMV has been designed to produce valuable data that can help inform and augment case work, not take 
away from it. The IMV survey began with over 100. questions and has been reduced to 48 questions considered to 
produce the most relevant results. 


Q. (U//FOUO) Will IMV undergo updates? 

A. (U//FOUO) Yes. IMV comprises a dynamic dataset, and updates will be necessary to incorporate Incoming IMV survey 
results into the existing historical data, The Americas Fusion Cell will work with the Sentinel team to conduct updates 
every month during the first quarter of the roliout (October 2015 — December 2015), and every quarter thereafter 
(January, April, July, and October). As updates are completed, the dataset will become larger and the weighting of IMV 
questions will become more accurate, resulting in changes to IMV scores. 


Q. {U//FOUO) Can analysts use IMV data to support finished analytical products? 

A, (U//FQUO) No analytic products should incorporate IMV data at this time. Because the dataset will change over time, 
AMFC requests that no finished intelligence products be drafted using this information until enough data has been 
collected to ensure accurate analysis. CTD guidance will be forthcoming. 


Q. (U//FOUO)} Is IMV going to be shared with FVEYs partners? 

A. (U//FOUO) Yes. The FB! will share anonymized IMV data and information about its methodology with the FVEYs 
partners. In return, FVEY partners will provide AMOTU with results from their own similar initiatives. Collaboration with 
FVEY partners will aid both the FBI and our foreign partners with combating the globa! CT threat. 
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{U//FOUO) INDICATORS OF MOBILIZATION TO VIOLENCE (IMV) 
QUESTIONS 


U Gi ND 
1) (S//NF) Mobilization: Has the subject mobilized? (e.g. has the subject traveled, 
attempted to travel overseas to participate in violence; has the subject been arrested in 
a terrorism charge; or has the subject conducted a terrorist attack?) 


2 


= 


(S//NF) Mobilization: Does Subject possess or have immediate access to weapons? 


3 


(S//NF) Radicalization: Does the Subject have a history of substance abuse (drugs, 
alcohol, etc)? 


4 


(S//NF) Radicalization: Is the Subject a religious convert? (drop down) Less than 12 
months ago; 1-3 years ago; More than 3 years ago. 


5 


(S//NF) Radicalization: Was the Subject convicted of a violent felony? (drop down) 
Incarcerated following conviction; Not incarcerated following conviction. 


6 


(5//NF) Radicalization: Has the Subject been medically diagnosed or judicially ruled 
mentally incompetent? 


7 


(S//NF) Radicalization: Has Subject been officially or legally excluded or disinvited from 
an organization for espousing violence? (i.e. being too radical) 


(S//NF) Radicalization: Has the Subject experienced a recent personal loss or 
humiliation, either real or imagined? (e.g. death, breakup, divorce, loss of a job, 
perceived injury to status or self-image) 


9 


(S//NF) Radicalization: Has the Subject ever experienced or been exposed to a violent 
“change of life" event? (to include abuse, violence, assault, etc) 


10) (S//NF) Radicalization: Does the Subject have military or law enforcement experience? 
(check all that apply) Military; Law Enforcement; Current; Previous. 


11) (5//NF) Mobilization: Is the Subject suspected of previousiy participating in extremist 
violence overseas or attending training camps? 
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12) (S//NF) Radicalization: Does the Subject associate with individuals who have criminal 
records? 


IDE Y 


13) (S//NF) Radicalization: Does the Subject hold a belief or ideology that supports the use 
of violence? 


14) (S//NF} Radicalization: Does Subject cite a specific significant event or events as the 
cause of the Subject's grievance(s)? 


15) (S//NF) Radicalization: Has the Subject become more extreme in their beliefs specific to 
violent ideology? 


16) (S//NF) Radicalization: Has Subject sought or obtained religious justification for 
violence? 


17) (S//NF) Radicalization: Has the Subject articulated a desire to conduct violent jihad or 
achieve martyrdom? 


18) (S//NF) Radicalization: Is the Subject resoived that violence is justified and necessary to 
address his grievance? 


19) (S//NF} Mobilization: Has the Subject made statements related to or prepared 
“statement” or farewell writings, to include manifestos, videos, notes, internet blogs, or 
emails, etc? 


U! D INING 
20) (S//NF) Radicalization: Is the Subject a regular consumer of extremist propaganda? 
21) (5//NF) Mobilization; Has the Subject engaged in or discussed tradecraft to hide their 
online activities contextually different from previous activity? (check all that apply) 
Encryption; IP anonymizers; Steganography; Password-protected websites; Mis- 
attributable email accounts; Other. 


22) (S//NF) Radicalization: Does the Subject have an intense interest or fascination with 
previous bombings or violent attacks? 


23) (S//NF) Mobilization: Has the Subject researched or attempted to acquire weapons or 


bomb-making materials? (check all that apply) Weapons; Explosives; Pre-cursor 
materials; Other. 
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24) (S//NF} Mobilization: Has the Subject conducted research for target selection, 
acquisition of technical capabilities, planning and logistics? 


25) (S//NF) Mobilization: Has the Subject conducted surveillance on potential targets? 


{U) SOCIAL 


26) (S//NF) Radicalization: Has the Subject changed his behaviors toward, or approach to, 
those outside of his “in-group"? 


27) (S//NF) Radicalization: Does the Subject's family, friends or intimates espouse or 
support a violent extremist ideology? 


28) (S//NF) Radicalization: Does the Subject have a history (whether actual or implied) of 
membership in or association with a group that advocates violence? 


29) (S//NF) Radicalization: Has the Subject been reported to authorities including law 
enforcement or religious leaders by family members or associates? 


30) (S//NF) Radicalization: Was the Subject recruited/targeted for extremism? 


31) (S//NF) Radicalization: Has the Subject sought or received direct guidance from 
overseas extremists? 


32) (S//NF) Radicalization: Has the Subject attempted to radicalize/mobilize/facilitate others 
to support violence or extremist activity? 


33) (S//NF) Radicalization: Has the Subject sworn allegiance or bayat to a group or individual 
who advocates violence? 


34) (S//NF) Mobilization: Has the Subject participated in gatherings where plotting violence 
is discussed? 


35) (S//NF) Mobilization: Has there been a sudden withdrawal from the Subject's known life 
pattern? (e.g. retreating to temporary quarters, being absent from work/schoo! without 
explanation, failing to appear for appointments that are normally kept, etc} 

36) (S//NF) Mobilization: Has the Subject significantly changed his physical appearance? 


37) (S//NF) Mobilization: Has there been a significant change in the Subject's behavior from 
that previously observed during the investigation? (e.g. he was a drinker and now 
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abstains, he was a drug user and now abstains, he was religiously observant and now is 
not, etc.) 


(U) TRAINING AND PREPARATION 


38) (S//NF) Mobilization: Has the Subject sought training in the use of weapons or 
explosives? 


39) (S//NF} Mobilization: Has the Subject exhibited unusual/suspicious financial patterns? 
(check all that apply) Unexplained increase/decrease in funds; Complex financial 
transactions; Money received from overseas; Maxing credit cards; Other. 


40) (S//NF) Mobilization: Has the Subject sought employment, or is currently employed in 
an occupation with sensitive access? (check all that apply) Airport; Other transportation 
facility; Critical infrastructure facilities; Law Enforcement facilities; Employment with 
access to DoD facilities; Employment with a security clearance; National laboratories; 
Other. 


41) (S//NF) Mobilization: Has the Subject increased his operational security or discussed 
methods of evading detection? 


42) (S//NF) Mobilization: Has the Subject participated in activities that simulate military or 
operational environments (e.g. paint ball, airsoft, laser tag, shooting ranges, 
camping/survival trips, etc) 


43) (S//NF} Mobilization: Has the Subject stopped his communications where previously he 
has been very communicative? (e.g. postings, email, texts, telephonic, in person, etc)? 


44) (S//NF) Mobilization: Has the subject attempted to physically approach an identified 
target or attempted to breach or circumvent security measures in a manner beyond 
previous surveillance attempts? 


(U) TRAVEL 


45) (S//NF) Radicalization; Has the Subject expressed a desire to travel overseas to engage 
in violence? 


46) (S//NF) Mobilization: Does the Subject have a passport or has the Subject applied for a 
Passport (either as a new application or for one being reported “lost/stolen")? (check ail 
that apply) Currently possesses a passport; Applied for a new passport; Claimed 
previous passport was fost/stolen. 


SECRET/ /NOFORN 


SECRET / /NOFORN 


47) (S//NF) Mobilization: Has the Subject attempted to travel overseas to engage in 
violence? 


48) (S//NF) Mobilization: Is the Subject aware of their watchlisting status? 
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